Confirmed by the maintainer
8.8CVSS
High
Two remote code execution bugs in LEANN
An open-source vector database with 13k stars on GitHub.
2 GitHub advisoriesCVE pending
Full-stack developer, IT engineering student
I build software you can talk to, and tools that show their work.
Third year in Wrocław. Looking for an internship in summer 2027, or part-time now.
I build software that talks, tidies, books and breaks in.
Track 1Tested on 150+ real calls
An AI receptionist for clinics in Turkey. It answers in Turkish, books the appointment, and stops talking the moment you cut in.
A test call, drawn as it happens.
I built every layer alone. Calls arrive over SIP through Asterisk, twenty milliseconds of audio at a time. Speech-to-text runs while you are still talking, Claude writes the answer one sentence at a time, and ElevenLabs starts on the first sentence before the second one exists. If Claude is slow, three other models are waiting.
It ran on a real Turkish phone number until the server lease ended in October 2026. A browser demo is being built; until then, its own site walks through a call down to the millisecond.
The hard part wasn’t the AI. It was knowing when someone has finished talking.
Track 2Out now, open source
A free Windows cleaner that tells you why your PC is slow, and refuses to claim anything it didn’t measure.
I wanted a cleaner I could trust. Every diagnosis is a rule you can read in the source, and every finding carries the evidence it was built from. It only touches an allowlist, every change can be undone, and there is no telemetry, no account and no AI inside.
Days later it reads its own changes back, to check Windows didn’t quietly undo them. 171 tests keep it honest. One line to install:
irm https://raw.githubusercontent.com/merturl4576/brisk/main/get.ps1 | iexIf brisk can’t measure it, brisk doesn’t say it.


Track 3In development, iOS and Android
Booking for barbers, hairdressers, nail and massage salons in Turkey. You find a free slot today; the shop sees its whole day on one screen.
Two apps on one Supabase backend, one for customers and one for the shop. It began as a clickable prototype: filmed salon scenes behind the search, a headline word that changes with each scene, and a calendar that flags first-time customers so the shop can greet them properly.
Now it is moving into Expo, one screen at a time. The working name is sıradaki, “who’s next”. If you want to click through the prototype, ask me and I’ll send the link.
The shop should know who’s walking in for the first time.
Berber, kuaför, tırnak, masaj. Yakınındaki boş saatler tek yerde.
Puan, mesafe ve bugünkü boşluklar aynı kartta.
Dolu saatler üstü çizili. Tahmin yok.
Tik çizilir, randevu kartı hazır.
İlk kez gelen müşteri işaretli.
From the prototype. The final screens are being rebuilt in Expo.
Track 4In development, private
An agent that hunts for security bugs in bug-bounty programmes, built so it can’t break the rules it’s given.
It wraps the open-source Strix engine in a safety core of my own. Before any request leaves, a scope gate checks the target against the programme’s rules, and the sandbox can only reach hosts on an allowlist.
Findings come to me as drafts, and I decide what gets sent.
Finding bugs is the easy part. Staying inside the rules while you look is the work.
Found so far
Three reports, all confirmed and disclosed responsibly. One CVE is public; the LEANN details follow once those advisories are published.
Confirmed by the maintainer
8.8CVSS
High
An open-source vector database with 13k stars on GitHub.
2 GitHub advisoriesCVE pending
Validated by Patchstack
5.3CVSS
Medium
A WordPress plugin. The bug needs no login.
CVE-2026-115595OWASP A01
--:--Where are you from?
Türkiye. I also hold a Bulgarian passport, so I can work anywhere in the EU without a visa. I’ve lived in Wrocław on my own since 2024.
--:--What are you studying?
IT engineering at WSB Merito, third year of three and a half. Last year I averaged 4.79 out of 5.
--:--How do you build?
With coding agents, a lot. They let me ship more than I could alone. The part I like is everything around them: deciding what to build, splitting the work, and checking what comes back.
--:--And when you’re not building?
I make small games in Godot. One of them is a judge simulator in the spirit of Papers, Please.